Privacy policy

Privacy Policy

Last updated: 6 August 2026

Bismillah Gift Centre respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and disclose personal information when you:

  • Visit or browse our website;

  • Create or use a customer account;

  • Purchase or return a product;

  • Contact us;

  • Subscribe to marketing;

  • Submit a review or other content;

  • Interact with our advertisements or social-media content; or

  • Otherwise use our website, products or services.

Our online store is hosted and supported by Shopify.

This policy should be read together with our Terms of Service, Returns and Refunds Policy, Shipping Policy and Cookie information.

1. Who We Are

For the purposes of applicable UK data protection law, Bismillah Gift Centre is the controller of the personal information described in this policy, except where another organisation acts as an independent controller for its own processing.

Our contact details are:

Bismillah Gift Centre
33 St Margarets Road
Bradford
BD7 3AE
United Kingdom

Email: bismillahgiftcentre33@gmail.com
Telephone: +44 1274 573786
Website: www.bismillahgiftcentre.co.uk

Questions about this Privacy Policy or requests concerning your personal information should be sent to:

bismillahgiftcentre33@gmail.com

2. What Personal Information We Collect

The information we collect depends on how you interact with us.

2.1 Identity and contact information

This may include:

  • Your name;

  • Billing address;

  • Delivery address;

  • Email address;

  • Telephone number;

  • Account username; and

  • Other contact information you provide.

2.2 Order and transaction information

This may include:

  • Products viewed or purchased;

  • Products added to your basket or wishlist;

  • Order number;

  • Order value;

  • Payment status;

  • Delivery method;

  • Delivery status;

  • Returns, refunds, exchanges and cancellations;

  • Discount or gift-card use; and

  • Communications relating to your order.

2.3 Payment information

Payments are processed through Shopify and enabled payment-service providers.

We do not normally receive or retain your complete payment-card number, card-security code or full banking credentials.

We may receive limited payment-related information, such as:

  • Payment method;

  • Payment confirmation;

  • Transaction reference;

  • Billing name and address;

  • Fraud-screening result;

  • Refund status; and

  • The last digits or other limited identifiers associated with a payment method.

Payment providers process payment information under their own privacy notices and security arrangements.

2.4 Customer-account information

Where customer accounts are available, we may process:

  • Login details;

  • Account settings;

  • Saved addresses;

  • Order history;

  • Wishlist information;

  • Marketing preferences; and

  • Account-security information.

You are responsible for keeping your login credentials confidential.

2.5 Communications and customer-service information

When you contact us, we may collect:

  • The content of your message;

  • Your name and contact details;

  • Your order information;

  • Photographs or videos you send;

  • Product complaints;

  • Return or refund information; and

  • Records of our response.

Please do not send sensitive personal information unless it is genuinely necessary for us to deal with your enquiry.

2.6 Website, device and technical information

When you use our website, we or our authorised service providers may collect:

  • Internet Protocol address;

  • Browser type and version;

  • Device type;

  • Operating system;

  • Approximate location derived from an IP address;

  • Referring website;

  • Pages viewed;

  • Time and date of visits;

  • Products viewed;

  • Basket activity;

  • Website interactions;

  • Cookie identifiers; and

  • Diagnostic, security and performance information.

Non-essential tracking and advertising technologies should only operate where the required consent or other lawful permission has been obtained.

2.7 Reviews and user-submitted content

Where reviews or other content features are enabled, we may collect:

  • Your name or display name;

  • Review text;

  • Rating;

  • Photographs or videos;

  • Product purchased; and

  • Verification information.

Content submitted for public display may be visible to other website visitors.

Do not publish personal information that you do not want to make public.

2.8 Marketing information

Where applicable, we may collect:

  • Email-marketing preferences;

  • Records of consent;

  • Opt-in and opt-out dates;

  • Marketing interactions;

  • Email opens and link clicks, where enabled;

  • Products or categories of interest; and

  • Advertising interactions, where permitted.

2.9 Fraud and security information

We may process information used to prevent fraud and protect our business, including:

  • Payment-risk indicators;

  • Suspicious ordering patterns;

  • Failed login attempts;

  • Device identifiers;

  • IP addresses;

  • Delivery discrepancies; and

  • Information connected with suspected misuse, chargebacks or unlawful activity.

3. How We Collect Personal Information

We may collect information:

Directly from you

For example, when you:

  • Place an order;

  • Create an account;

  • Contact us;

  • Request a return;

  • Subscribe to marketing;

  • Submit a review; or

  • Complete a form.

Automatically

Information may be collected automatically through:

  • Cookies;

  • Pixels;

  • Tags;

  • Local-storage technologies;

  • Server logs;

  • Analytics tools; and

  • Similar technologies.

From Shopify and service providers

We may receive information from organisations that assist us with:

  • Website hosting;

  • E-commerce services;

  • Payment processing;

  • Fraud prevention;

  • Delivery and fulfilment;

  • Customer support;

  • Website security;

  • Data storage;

  • Analytics;

  • Marketing; and

  • Technical maintenance.

From third parties

Where lawful and relevant, we may receive information from:

  • Delivery providers;

  • Payment providers;

  • Fraud-prevention providers;

  • Social-media platforms;

  • Advertising platforms;

  • Review providers; and

  • Publicly available sources.

We do not knowingly purchase personal consumer email lists for marketing.

4. Why We Use Personal Information and Our Lawful Bases

UK data protection law requires us to have a valid lawful basis for processing personal information.

The lawful basis depends on the purpose and circumstances.

4.1 Processing and fulfilling orders

We use information to:

  • Confirm orders;

  • Process payments;

  • Prepare and dispatch goods;

  • Provide delivery updates;

  • Manage collections;

  • Process returns, exchanges and refunds;

  • Handle customer-service enquiries; and

  • Enforce our contractual terms.

Lawful basis: Performance of a contract or taking steps at your request before entering into a contract.

4.2 Operating customer accounts

We use information to:

  • Create and maintain accounts;

  • Save customer preferences;

  • Display order history;

  • Authenticate users; and

  • Protect account security.

Lawful basis: Performance of a contract and our legitimate interests in operating a secure and convenient online store.

4.3 Customer service and complaints

We use information to:

  • Respond to enquiries;

  • Investigate complaints;

  • Resolve delivery issues;

  • Assess product faults;

  • Provide refunds or remedies; and

  • Maintain records of customer communications.

Lawful basis: Performance of a contract, compliance with legal obligations and our legitimate interests in providing effective customer support and resolving disputes.

4.4 Legal and regulatory compliance

We use information to:

  • Maintain accounting and tax records;

  • Respond to lawful requests;

  • Comply with consumer-protection obligations;

  • Manage product-safety matters;

  • Support recalls where required;

  • Establish or defend legal claims; and

  • Comply with court orders or regulatory requirements.

Lawful basis: Compliance with a legal obligation and, where relevant, our legitimate interests in protecting our legal rights.

4.5 Fraud prevention and security

We use information to:

  • Prevent fraudulent transactions;

  • Detect account misuse;

  • Protect our website;

  • Investigate suspicious activity;

  • Manage chargebacks;

  • Protect customers; and

  • Protect our business and service providers.

Lawful basis: Our legitimate interests in preventing fraud, maintaining security and protecting our business and customers. In some circumstances, processing may also be required to comply with a legal obligation.

4.6 Website operation and improvement

We may use information to:

  • Maintain website functionality;

  • Diagnose technical issues;

  • Understand website use;

  • Improve navigation;

  • Improve product presentation;

  • Measure performance;

  • Analyse customer demand; and

  • Improve our products and services.

Lawful basis: Our legitimate interests in operating and improving our website and business.

Where non-essential cookies or similar technologies require consent, we rely on your consent.

4.7 Personalisation and product recommendations

Where enabled, we may use browsing and purchasing information to:

  • Display relevant products;

  • Recommend related products;

  • Remember preferences; and

  • Improve the shopping experience.

Lawful basis: Our legitimate interests in improving the shopping experience, or consent where required for the technologies involved.

4.8 Direct marketing

We may send marketing about our products, offers and services where:

  • You have consented; or

  • The law permits us to contact existing customers about similar products and services and all conditions for doing so are met.

Every marketing email will provide an unsubscribe method.

Lawful basis: Consent or legitimate interests, depending on the circumstances and subject to applicable electronic-marketing rules.

We will not continue sending marketing communications after a valid opt-out has been processed.

4.9 Advertising and measurement

Where enabled and permitted, we may use information to:

  • Measure advertising effectiveness;

  • Understand whether advertisements resulted in visits or purchases;

  • Create relevant advertising audiences; and

  • Display advertisements based on interactions with our website.

Lawful basis: Consent where required for advertising cookies, tracking pixels or similar technologies. In limited circumstances, legitimate interests may apply to non-intrusive measurement that does not require consent.

5. Legitimate Interests

Where we rely on legitimate interests, we consider:

  • Whether the processing is necessary;

  • Whether our interests are lawful and reasonable;

  • The likely impact on customers;

  • Whether customers would reasonably expect the processing; and

  • Whether appropriate safeguards can reduce privacy risks.

Our legitimate interests may include:

  • Operating an online retail business;

  • Improving products and services;

  • Preventing fraud;

  • Securing accounts and systems;

  • Resolving complaints;

  • Understanding customer demand;

  • Maintaining accurate business records; and

  • Establishing or defending legal claims.

You may have the right to object to processing based on legitimate interests.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Cookies are small files or identifiers stored on or accessed from your device.

6.1 Strictly necessary cookies

These may be required for:

  • Shopping baskets;

  • Checkout;

  • Security;

  • Fraud prevention;

  • Login sessions;

  • Privacy preferences; and

  • Core website functions.

These technologies may operate without consent where legally permitted because they are necessary to provide a service requested by the user.

6.2 Functional cookies

These may remember:

  • Language;

  • Region;

  • Display preferences;

  • Recently viewed products; and

  • Other optional settings.

6.3 Analytics cookies

Where enabled, these may help us understand:

  • Website traffic;

  • Popular pages;

  • Customer navigation;

  • Website errors; and

  • Overall website performance.

6.4 Advertising cookies

Where enabled, advertising technologies may:

  • Measure advertising;

  • Limit repeated advertising;

  • Build advertising audiences;

  • Record interactions with campaigns; and

  • Display more relevant advertisements.

Where consent is required, non-essential cookies and similar technologies should not be activated until consent is given.

You may accept, reject or manage cookies through the cookie controls made available on the website.

You can also change browser settings, although blocking strictly necessary cookies may affect website functionality.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

7. Marketing Communications

We may send marketing by email where legally permitted.

You can opt out at any time by:

Opting out of marketing does not stop necessary service communications, including:

  • Order confirmations;

  • Dispatch notices;

  • Delivery updates;

  • Account-security messages;

  • Return communications; and

  • Important policy or service notices.

We may retain limited information on a suppression list to ensure that your marketing opt-out continues to be respected.

8. How We Share Personal Information

We may disclose personal information only where necessary, lawful and proportionate.

8.1 Shopify

Our store is hosted through Shopify.

Shopify processes information necessary to provide:

  • Store hosting;

  • Checkout;

  • Customer accounts;

  • Security;

  • Fraud screening;

  • Analytics;

  • Store functionality; and

  • Other enabled Shopify services.

Shopify may process certain information as our service provider and may process other information for its own stated purposes under its own privacy documentation.

8.2 Payment providers

Payment providers process payments, refunds and fraud checks.

They may act as independent controllers for parts of their processing and apply their own privacy policies.

8.3 Delivery and fulfilment providers

We may share the information required to deliver or collect an order, including:

  • Customer name;

  • Delivery address;

  • Contact number;

  • Email address;

  • Order reference;

  • Parcel details; and

  • Delivery instructions.

8.4 Technology and service providers

We may use providers supporting:

  • Website hosting;

  • Cloud storage;

  • Email;

  • Customer support;

  • Data backup;

  • Website security;

  • Fraud prevention;

  • Analytics;

  • Review collection;

  • Marketing;

  • Advertising; and

  • Technical maintenance.

These providers may only receive information reasonably necessary for the service they provide.

8.5 Professional advisers

We may disclose information to:

  • Accountants;

  • Insurers;

  • Solicitors;

  • Tax advisers;

  • Auditors; and

  • Other professional advisers.

8.6 Authorities and legal recipients

We may disclose information where reasonably necessary to:

  • Comply with law;

  • Respond to a court order;

  • Respond to a lawful regulatory request;

  • Report suspected fraud;

  • Protect safety;

  • Enforce our terms; or

  • Establish, exercise or defend legal claims.

8.7 Business transfers

If our business or assets are sold, reorganised, transferred or merged, personal information may be disclosed to relevant advisers, potential purchasers or successor organisations, subject to appropriate confidentiality and legal safeguards.

9. Shopify and Enhanced Services

Shopify may collect and process information relating to access to and use of our store.

Where Shopify features combine information from interactions with our store, Shopify or other merchants to provide enhanced services, Shopify may be responsible for certain processing carried out for those purposes.

Customers can obtain further information through Shopify’s consumer privacy information and privacy portal:

Shopify Consumer Privacy:
https://privacy.shopify.com/

Bismillah Gift Centre does not control Shopify’s independent processing activities.

10. International Transfers

Some service providers may process or make personal information accessible outside the United Kingdom.

Where a restricted international transfer is made, we will seek to ensure that it is covered by an appropriate legal mechanism, which may include:

  • UK adequacy regulations;

  • The UK International Data Transfer Agreement;

  • The UK Addendum to approved standard contractual clauses;

  • Another recognised safeguard; or

  • A lawful exception available under data protection law.

Service providers may also apply contractual, technical and organisational protections to transferred data.

You may contact us for further information about safeguards relevant to your personal information.

11. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, fraud-prevention, product-safety and dispute-resolution requirements.

Retention periods may include:

Order, invoice and transaction records

These may normally be retained for at least six years where required for accounting, tax, VAT, contractual or legal purposes.

Customer-account information

This may be retained while an account remains active and for a reasonable period after closure where required for security, disputes, legal compliance or record keeping.

Customer-service communications

These may be retained for a reasonable period after an enquiry is resolved and longer where connected to an order, complaint, legal claim or product-safety issue.

Marketing records

Marketing-contact information may be retained until you unsubscribe, withdraw consent or object.

A limited suppression record may be retained after opt-out to prevent further marketing.

Cookie and analytics data

Retention depends on the particular cookie, technology and service involved. Further information should be available through the website’s cookie settings or the relevant service.

Fraud and security records

These may be retained for as long as reasonably necessary to investigate incidents, prevent repeat fraud, manage disputes and protect our business.

We may retain information longer where:

  • Required by law;

  • Required by a tax or regulatory authority;

  • A complaint or dispute remains unresolved;

  • Litigation is anticipated or ongoing;

  • A product-safety issue exists; or

  • It is necessary to prevent fraud or misuse.

When information is no longer required, we will delete, anonymise or securely dispose of it where reasonably practicable.

12. Data Security

We use reasonable technical and organisational measures designed to protect personal information against:

  • Unauthorised access;

  • Accidental loss;

  • Misuse;

  • Alteration;

  • Unauthorised disclosure; and

  • Destruction.

These measures may include:

  • Access controls;

  • Password protections;

  • Encryption used by our platform and payment providers;

  • Secure checkout systems;

  • Staff-access restrictions;

  • System updates;

  • Backups;

  • Fraud controls; and

  • Service-provider security requirements.

No website, transmission method or storage system is completely secure.

You should not send full payment-card details, passwords or other highly sensitive information through ordinary email.

If you believe your account or information may have been compromised, contact us promptly.

13. Your Data Protection Rights

Depending on the circumstances, UK data protection law may provide the following rights.

Right of access

You may request confirmation that we process your personal information and obtain a copy of relevant information.

Right to rectification

You may ask us to correct incomplete or inaccurate personal information.

Right to erasure

You may ask us to delete personal information in circumstances where the law provides this right.

This right is not absolute, and we may retain information where required for legal, tax, contractual, fraud-prevention or other legitimate reasons.

Right to restriction

You may ask us to restrict processing in certain circumstances.

Right to object

You may object to processing based on legitimate interests.

You have an absolute right to object to the use of your personal information for direct marketing.

Right to data portability

Where applicable, you may request certain information in a structured, commonly used and machine-readable format, or request its transfer to another controller.

Right to withdraw consent

Where processing is based on consent, you may withdraw consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Rights concerning automated decision-making

Where applicable, you may have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.

14. How to Exercise Your Rights

To exercise a privacy right, contact:

Email: bismillahgiftcentre33@gmail.com

Please provide:

  • Your full name;

  • The email address associated with your account or order;

  • Your order number where relevant;

  • The right you wish to exercise; and

  • Sufficient information to identify the relevant records.

We may request reasonable evidence of identity before disclosing or changing personal information.

This helps protect customers against unauthorised access.

We will respond within the period required by applicable law. Complex requests or multiple requests may lawfully require additional time, in which case we will explain the extension.

We will normally process valid rights requests without charge. A reasonable fee may be permitted where a request is manifestly unfounded, excessive or repetitive, or we may decline the request where the law allows.

15. Complaints

Please contact us first if you have concerns about how we use personal information.

Email: bismillahgiftcentre33@gmail.com
Telephone: +44 1274 573786

You also have the right to complain to the UK Information Commissioner’s Office.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Telephone: 0303 123 1113
Website: https://ico.org.uk/

You may also have the right to complain to another competent data-protection authority if you live outside the United Kingdom.

16. Children’s Privacy

Our website and products are intended for general retail customers and are not designed to collect personal information directly from children.

We do not knowingly collect personal information from a child who lacks the legal capacity or required parental authorisation to provide it.

If you believe that a child has provided personal information without appropriate authority, contact:

bismillahgiftcentre33@gmail.com

We will assess the matter and delete the information where required.

17. Third-Party Websites and Social Media

Our website may contain links to:

  • Social-media platforms;

  • Payment services;

  • Delivery tracking;

  • Review services;

  • External websites; and

  • Other third-party services.

Third parties operate under their own privacy notices and terms.

We are not responsible for the privacy practices, security or content of third-party websites that we do not control.

Information posted publicly through social media, reviews or other public platforms may be visible and used by other users of those services.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

  • Changes to our operations;

  • New website functions;

  • New service providers;

  • Changes to legal requirements;

  • Changes to Shopify services;

  • Security improvements; or

  • Other operational or regulatory developments.

The latest version will be published on our website with an updated revision date.

Where required by law, we will provide additional notice of material changes.

19. Contact Us

Questions, requests or complaints concerning this Privacy Policy or your personal information should be directed to:

Bismillah Gift Centre
33 St Margarets Road
Bradford
BD7 3AE
United Kingdom

Email: bismillahgiftcentre33@gmail.com
Telephone: +44 1274 573786

For applicable UK data protection purposes, Bismillah Gift Centre is the controller of the personal information described in this policy, except where another organisation acts as a separate controller for its own processing.